Packagist/winter/wn-backend-module: medium 4.3
Winter: My Account preview exposes another backend user's profile by record ID
Action: Upgrade winter/wn-backend-module to 1.2.14 or later.
composer require winter/wn-backend-module:1.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.13 | 1.2.14 | - |
Fixed versions
| 1.2.14 |
Sources
- osv: GHSA-mpmw-f6h6-3g26
- https://github.com/wintercms/winter/security/advisories/GHSA-mpmw-f6h6-3g26
- https://github.com/wintercms/winter/commit/cdbc8f5a23db27f72ccec658a8e5769e6d9f6dcb
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.14
published · modified · JSON